I am looking to secure our console ports in our remote console router equipped with HWIC-16A cards and RS232 cables.
As the network admins, we usually login to these routers first (using privilege 15 accounts via TACACS+) then connect to our hosts by telnet to their corresponding ports
eg. telnet 220.127.116.11 2021
Now our server guys have obtained devices that can be managed by console access and they'd like to use our routers for this. They have a read-only account that we've setup with "privilege 5" access.
I've provided them with "telnet 192.168.0.5 2020" which will have them login once to the router and then prompting to login with their read-only account.
The problem I found is that they're able to console connect to our firewalls which lives on port 2021.
Is there a way to limit connections to port 2021 to only users with privilege 15?
I've tried entering "privilege 15" on line 0/1/1 which port 2021 resides on and I can still access our firewall's console with read-only account.
All our network devices authenticates with TACACS+ and read-only access are not permitted to firewalls. I am looking to secure these connections further as usage of our router may increase over time!
Any help is appreciated. Thank you!